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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently Amended) A method comprising: 

storing a current sort encryption key (SEK) at a first destination in an internal memory of 
an electronic component; 

storing a next SEK at the first destination in the internal memory; 
providing the electronic component to a second destination; and 

recovering a private key at the second destination from a key bundle based on the current 
SEK, the next SEK and a plurality of bundles received at the second destination , each of the 
plurality of bundles including a key, a key identifier and an integrity check value . 

2. (Original) The method of claim 1, wherein prior to storing the current SEK at the 
first destination, the method further comprises: 

transferring at least a first bundle to the first destination via a first link; and 
transferring at least a second bundle to the first destination via a first out-of-band 
information carrying mechanism. 

3. (Original) The method of claim 2, wherein the first bundle includes a plurality of 
configuration window (CWIN) bundles. 

4. (Currently Amended) The method of claim 3, wherein each of the CWIN bundles 
includes a configuration window material, the configuration window material includes (i) a first 
key identifier associated with the current SEK, (ii) the current SEK, (iii) a second key identifier 
associated with the next SEK, (iv) the next SEK and (v) a group integrity check value for a first 
encryption key and a second encryption key. 

5. (Original) The method of claim 4, wherein the configuration window material is 
encrypted with the first encryption key and the second encryption key. 
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6. (Original) The method of claim 5, wherein each CWIN bundle further includes a 
group identifier associated with the first encryption key and the second encryption key. 

7. (Original) The method of claim 3, wherein the second bundle includes a plurality 
of sort encryption key (SEK) bundles. 

8. (Original) The method of claim 7, wherein each of the SEK bundles includes (i) a 
sort encryption key, (ii) a key identifier associated with the sort encryption key and (iii) an 
integrity check value associated with the sort encryption key. 

9. (Original) The method of claim 2, wherein prior to storing the current SEK at the 
first destination, the method further comprises: 

transferring the plurality of bundles to the second destination, the plurality of bundles 
includes a third bundle and a fourth bundle. 

10. (Original) The method of claim 9, wherein the third bundle is transferred to the 
second destination via a second link. 

11. (Original) The method of claim 9, wherein the fourth bundle is transferred to the 
second destination via a second out-of-band information carrying medium. 

12. (Original) The method of claim 9, wherein the third bundle is a plurality of 
second part bundle encryption key (BEK P 2) bundles, each of the BEK p2 bundles includes a 
second part of the bundle encryption key and a combined integrity check value associated with a 
first encryption key and a second encryption key. 

13. (Original) The method of claim 12, wherein the second part of the bundle 
encryption key and the combined integrity check value are encrypted with the first encryption 
key and the second encryption key. 
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14. (Original) The method of claim 12, wherein each BEK P 2 bundle further includes 
a group identifier associated with the first encryption key and the second encryption key. 

15 (Original) The method of claim 9, wherein the fourth bundle includes a plurality 
of configuration encryption key (CEK) bundles. 

16. (Original) The method of claim 15, wherein each of the CEK bundles includes (i) 
a configuration encryption key, (ii) a key identifier associated with the configuration encryption 
key and (iii) an integrity check value associated with the configuration encryption key. 

1 7. (Currently Amended) A method comprising: 

at a first destination, recovering a current sort encryption key (SEK) and a next SEK 
based on information within a first plurality of incoming bundles each including a first key and a 
first integrity check value being a hash result of data inclusive of the first key, and storing the 
current SEK and the next SEK in an internal memory of an electronic component; and 

at a second destination, upon receipt of the electronic component, recovering a private 
key from a key bundle based on the current SEK, the next SEK and a second plurality of 
incoming bundles , each of the second plurality of incoming bundles including a second key and a 
second integrity check value being a hash result of data inclusive of the second key . 

18. (Original) The method of claim 17, wherein the current SEK represents a current 
period of validity for configuration of the electronic component. 

19. (Original) The method of claim 17, wherein the next SEK represents a next 
period of validity for configuration of the electronic component. 

20. (Original) The method of claim 19, wherein the private key is prevented from 
being recovered if the next period of validity has lapsed. 

2 1 . (Original) The method of claim 1 7, wherein the first plurality of incoming 
bundles includes a plurality of configuration window (CWIN) bundles. 
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22. (Original) The method of claim 21 , wherein each of the CWIN bundles includes 
(i) a first key identifier associated with the current SEK, (ii) the current SEK, (iii) a second key 
identifier associated with the next SEK, (iv) the next SEK and (v) a group integrity check value 
for a first encryption key and a second encryption key. 

23. (Original) The method of claim 22, wherein the first key identifier, the current 
SEK, the second key identifier, the next SEK and the group integrity check value are encrypted 
with the first encryption key and the second encryption key. 

24. (Original) The method of claim 23, wherein each CWIN bundle further includes 
a group identifier associated with the first encryption key and the second encryption key. 

25. (Original) The method of claim 17, wherein the first plurality of incoming 
bundles includes a plurality of sort encryption key (SEK) bundles. 

26. (Original) The method of claim 25, wherein each of the SEK bundles includes (i) 
a sort encryption key, (ii) a key identifier associated with the sort encryption key, (iii) an 
integrity check value associated with the sort encryption key. 

27. (Currently Amended) The method of claim 17, wherein the second plurality of 
bundles includes a plurality of first part bundle encryption key (BEKpi^) bundles and a plurality 
of second part bundle encryption key (BEK P 2) bundles. 

28. (Original) The method of claim 27, wherein each of the BEK P2 bundles includes 
a second part of the bundle encryption key and a group integrity check value for a first 
encryption key and a second encryption key. 

29. (Original) The method of claim 28, wherein one of the BEK p2 bundles includes a 
first part of the bundle encryption key and an integrity check value associated with the current 



SEK. 
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30. (Currently Amended) The method of claim 29, wherein one of the BEKpp 2 
bundles includes a first part of the bundle encryption key and an integrity check value associated 
with the next SEK. 

3 1 . (Original) The method of claim 30, wherein the bundle encryption key is 
recovered upon recovering the first and second parts of the bundle encryption key. 

32. (Original) The method of claim 31, wherein the private key is recovered using 
the bundle encryption key. 

33. (Currently Amended) A method comprising: 

receiving at least a first bundle in an encrypted format via a first link , the first bundle 
comprises a current sort encryption key (SEK), a key identifier associated with the current SEK, 
a next SEK, a key identifier associated with the next SEK and an integrity check value being a 
hash value produced by performing a hash operation on at least two keys used to encrypt the first 
bundle ; 

receiving at least a second bundle and a third bundle via a first out-of-band information 
carrying mechanism , the second bundle comprises (0 a first key of the at least two keys, (ii) a 
key identifier of the first key and (iiv) an integrity check value based on the first key and the key 
identifier of the first key, and the third bundle comprises (i) a second key of the at least two keys, 
(ii) a key identifier of the second key and (iii) an integrity check value based on the second key 
and the key identifier of the second key ; 

recovering thea current sort e ncryption k e y ( SEK) and thea next SEK based on 
information contained in the first bundtei aad-the second bundle and the third bundle ; and 

storing the current SEK and the next SEK in an internal memory of an electronic 
component. 

34. (Original) The method of claim 33, further comprising transferring the electronic 
component to a second destination. 
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35. (Original) The method of claim 34 further comprising receiving at least a third 
bundle via a second link; 

receiving at least a fourth bundle via a second out-of-band information carrying medium; 
recovering based on information in the third bundle, fourth bundle, the current SEK and 
the next SEK. 

36. (Original) The method of claim 35 further comprising recovering a private key 
based on the bundle encryption key. 

37. (Cancelled). 

38. (Currently Amended) AThe-network of claim 37, wh e r e in comprising: 

a source to output a first collection of encrypted keying material and a second collection 
of encrypted keying material; 

a first destination physically separate from the source, the first destination to receive the 
first collection of encrypted keying material, to decrypt keying material originating from the first 
collection of encrypted keying material for recovery of sort encryption keying material and to 
store the sort encryption keying material into an internal memory of an electronic component; 
and 

a second destination physically separate from the source, the second destination to 
receive the second collection of encrypted keying material, to decrypt keying material 
originating from the second collection of encrypted keying material for recovery of at least 
private key for subsequent loading in the internal memory, the first destination is physically 
separated from the second destination. 

39. (Currently Amended) The network of claim 387, wherein the sort encryption 
keying material includes a current sort encryption key (SEK) and a next SEK. 

40. (Original) The network of claim 39, wherein the current SEK and the next SEK 
collectively represents a period of validity in which the electronic component must be 
configured. 
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41. (Currently Amended) The network of claim 38?, wherein the second destination 
^ further recovers a digital certificate chain from the second collection of keying material and 
^ loads the digital certificate chain into the internal memory. 
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